CORS issues

Author: CodeJawn

app.js

@@ -43,7 +43,7 @@ async function loadConfig() {
                 config.preferences = { columnOrder: [], columnLayout: {} };
             }
 
-            console.log('Loaded config from server');
+            console.log('Loaded config from server (using API proxy)');
         } else {
             throw new Error('Could not load config.json');
         }
@@ -55,11 +55,11 @@ async function loadConfig() {
 
 // Make API request with authentication
 async function makeAPIRequest(endpoint) {
-    const url = `${config.karakeepUrl}/api${endpoint}`;
+    // Use local proxy to avoid CORS issues
+    const url = `/api/karakeep${endpoint}`;
     const response = await fetch(url, {
         method: 'GET',
         headers: {
-            'Authorization': `Bearer ${config.apiKey}`,
             'Content-Type': 'application/json'
         }
     });

server.py

@@ -1,14 +1,23 @@
 #!/usr/bin/env python3
 """
-Simple server for KaraKeep Homedash with preference persistence
-This is optional - you can use any static file server if you don't need
-cross-device preference syncing.
+Simple server for KaraKeep Homedash with preference persistence and API proxy
+This server also proxies API requests to KaraKeep to avoid CORS issues.
 """
 
 from http.server import HTTPServer, SimpleHTTPRequestHandler
 import json
 import os
 from urllib.parse import urlparse
+import urllib.request
+import urllib.error
+
+# Try to import ssl, but don't fail if it's not available
+try:
+    import ssl
+    SSL_AVAILABLE = True
+except ImportError:
+    SSL_AVAILABLE = False
+    print("Warning: SSL module not available. HTTPS connections may fail.")
 
 DEFAULT_CONFIG = {
     "karakeepUrl": "http://localhost:3000",
@@ -40,9 +49,71 @@ def do_GET(self):
         if self.path == '/config.json':
             self.path = '/config/config.json'
 
+        # Proxy API requests to KaraKeep
+        elif self.path.startswith('/api/karakeep/'):
+            self.proxy_to_karakeep('GET')
+            return
+        
         # Serve files normally
         return super().do_GET()
 
+    def proxy_to_karakeep(self, method):
+        """Proxy requests to KaraKeep API"""
+        try:
+            # Load config to get KaraKeep URL and API key
+            config_path = 'config/config.json'
+            with open(config_path, 'r') as f:
+                config = json.load(f)
+            
+            karakeep_url = config.get('karakeepUrl', 'http://localhost:3000')
+            api_key = config.get('apiKey', '')
+            
+            # Remove /api/karakeep prefix and construct the actual API path
+            api_path = self.path.replace('/api/karakeep', '/api', 1)
+            full_url = f"{karakeep_url}{api_path}"
+            
+            # Create request with auth header
+            req = urllib.request.Request(full_url)
+            req.add_header('Authorization', f'Bearer {api_key}')
+            req.add_header('Content-Type', 'application/json')
+            
+            # Create SSL context that handles self-signed certificates
+            # Note: This accepts any certificate, including self-signed ones
+            # In production with proper certificates, you may want to remove these lines
+            ssl_context = None
+            if SSL_AVAILABLE and full_url.startswith('https://'):
+                ssl_context = ssl.create_default_context()
+                ssl_context.check_hostname = False
+                ssl_context.verify_mode = ssl.CERT_NONE
+            
+            # Make the request
+            if ssl_context:
+                response = urllib.request.urlopen(req, context=ssl_context)
+            else:
+                response = urllib.request.urlopen(req)
+            data = response.read()
+            
+            # Send response back to client
+            self.send_response(response.getcode())
+            self.send_header('Content-Type', 'application/json')
+            self.end_headers()
+            self.wfile.write(data)
+            
+        except urllib.error.HTTPError as e:
+            # Forward HTTP errors
+            self.send_response(e.code)
+            self.send_header('Content-Type', 'application/json')
+            self.end_headers()
+            error_data = e.read()
+            self.wfile.write(error_data if error_data else json.dumps({"error": str(e)}).encode())
+            
+        except Exception as e:
+            # Handle other errors
+            self.send_response(500)
+            self.send_header('Content-Type', 'application/json')
+            self.end_headers()
+            self.wfile.write(json.dumps({"error": str(e)}).encode())
+    
     def do_POST(self):
         """Handle POST requests for saving preferences"""
         if self.path == '/api/preferences':
@@ -105,6 +176,7 @@ def do_OPTIONS(self):
     httpd = HTTPServer(server_address, KaraKeepHandler)
 
     print(f"KaraKeep HomeDash Server running on http://localhost:{port}")
+    print("API requests will be proxied to avoid CORS issues")
     print("Press Ctrl+C to stop")
 
     try: